last executing test programs: 2.138620003s ago: executing program 2 (id=754): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYRES16=r0], 0x6a) 1.943113853s ago: executing program 2 (id=758): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000000000000000000000000000095"], &(0x7f0000000300)='GPL\x00', 0x8, 0xff8, &(0x7f0000001e00)=""/4088}, 0x94) 1.735600494s ago: executing program 2 (id=761): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000080)={'team_slave_0\x00', @local}) 1.59582007s ago: executing program 1 (id=763): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) sendmsg$inet(0xffffffffffffffff, 0x0, 0x7000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000084ffffffe300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.543144603s ago: executing program 3 (id=764): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000440)={r0, &(0x7f0000000300)}, 0x20) 1.353426052s ago: executing program 1 (id=765): bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1b000000000000000000000000a00000040008"], 0x50) 1.353235622s ago: executing program 3 (id=766): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) 1.235388938s ago: executing program 1 (id=767): bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000680)={@map, 0xffffffffffffffff, 0x37, 0x8}, 0x20) 1.132194553s ago: executing program 3 (id=768): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0xf, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8b}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x20}, {0x85, 0x0, 0x0, 0x86}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0xa, 0x100d, &(0x7f00000023c0)=""/4109, 0x41100, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000}, 0x94) 969.483431ms ago: executing program 1 (id=769): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05000000"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 926.140154ms ago: executing program 0 (id=770): bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@generic={0x0, 0x0, 0x4}, 0x18) 721.646814ms ago: executing program 3 (id=771): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'pimreg1\x00', 0x7101}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) 656.968947ms ago: executing program 2 (id=772): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x8, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000060000850000001b000000b70000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1, 0xffffffffffffffff, 0x2000000}, 0xc) 656.780007ms ago: executing program 0 (id=773): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000911230000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 509.925895ms ago: executing program 2 (id=774): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="00000000040000090000000000000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c300000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r1, 0x5, 0xe, 0x0, &(0x7f00000000c0)="469dc2d342e2b7000091000000000bcf48f3ac4e19a56ceb0b42c0", 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x22) 440.109188ms ago: executing program 0 (id=775): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xe, 0x4, &(0x7f0000002000)=ANY=[@ANYBLOB="1800000008000000000000000800000089115c000000000095"], &(0x7f0000000c40)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) 341.515693ms ago: executing program 3 (id=776): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e120500210000000401a8001600a40001", 0x37}], 0x1}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 341.252493ms ago: executing program 1 (id=777): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)={@cgroup=r0, r0, 0x2f, 0x0, 0x4, @void, @value=r0}, 0x20) 240.360788ms ago: executing program 0 (id=778): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1e, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000100020000000000fdffffff85000000b500000085000000a000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 168.161592ms ago: executing program 2 (id=779): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f00000001c0)=@generic={0x21, "a55af77ad69971d0a003fe4bbd194cc3b3b3560cef525960e62b0acf70b92c473e78a3e9cd91e02962f47e286706451bdef00303f2bc562faa3d3df10a690b7369651881922b88ea0bbdbcdc82c2ede3d13ac4d50b811598624e57f24e7ef41c234f5c58f4bcc4f19ef79dfc00ee6e874ecffcd8acec1d6eae34b6e02776"}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x10b8}, 0x20000000) 93.533675ms ago: executing program 0 (id=780): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000bc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x7, [@enum={0x4, 0x1, 0x0, 0x6, 0x4, [{0x3, 0x4}]}]}, {0x0, [0x5f, 0x10, 0x61, 0x5f, 0x30]}}, 0x0, 0x33, 0x0, 0x1, 0x1}, 0x28) 5.63344ms ago: executing program 1 (id=781): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x746f2f51, &(0x7f0000000080)=[{&(0x7f0000000040)="3f0400001c008128e00f80ecdb4cb9f207c804a01f000000050006fb0a0002000a0ada1b40d80300000000000000", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x10, &(0x7f0000000000), 0xc) 4.69286ms ago: executing program 0 (id=782): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x10, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014004000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000008500000050000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r1, r0}, 0xc) 0s ago: executing program 3 (id=783): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'tunl0\x00', 0x200}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.156' (ED25519) to the list of known hosts. [ 88.627170][ T5757] cgroup: Unknown subsys name 'net' [ 88.762295][ T5757] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 90.687601][ T5757] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 92.610327][ T5772] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 92.627906][ T5775] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 92.637844][ T5775] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 92.646837][ T5775] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 92.657446][ T5775] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 92.664826][ T5772] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 92.669170][ T5775] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 92.680356][ T5772] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 92.685071][ T5775] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 92.705994][ T5780] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 92.714393][ T5775] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 92.726846][ T5780] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 92.755681][ T5780] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 92.766506][ T5780] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 92.775574][ T5780] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 92.785199][ T5780] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 92.793975][ T5780] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 92.813999][ T5780] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 92.874800][ T5780] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 92.884212][ T5780] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 92.892841][ T5780] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 92.908097][ T5780] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 92.917463][ T5780] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 92.926986][ T5780] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 93.459746][ T5769] chnl_net:caif_netlink_parms(): no params data found [ 93.579852][ T5768] chnl_net:caif_netlink_parms(): no params data found [ 93.728935][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 93.817434][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 93.850290][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.861962][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.870692][ T5769] bridge_slave_0: entered allmulticast mode [ 93.879428][ T5769] bridge_slave_0: entered promiscuous mode [ 93.905294][ T5768] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.912848][ T5768] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.921670][ T5768] bridge_slave_0: entered allmulticast mode [ 93.930215][ T5768] bridge_slave_0: entered promiscuous mode [ 93.940109][ T5768] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.948713][ T5768] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.956515][ T5768] bridge_slave_1: entered allmulticast mode [ 93.964783][ T5768] bridge_slave_1: entered promiscuous mode [ 93.976849][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.986103][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.995018][ T5769] bridge_slave_1: entered allmulticast mode [ 94.004060][ T5769] bridge_slave_1: entered promiscuous mode [ 94.115835][ T5768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.141171][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.149638][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.157261][ T5776] bridge_slave_0: entered allmulticast mode [ 94.165356][ T5776] bridge_slave_0: entered promiscuous mode [ 94.175996][ T5768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.192031][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.214455][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.225459][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.234582][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.242587][ T5776] bridge_slave_1: entered allmulticast mode [ 94.250462][ T5776] bridge_slave_1: entered promiscuous mode [ 94.351861][ T5768] team0: Port device team_slave_0 added [ 94.375560][ T5769] team0: Port device team_slave_0 added [ 94.382670][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.390854][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.399404][ T5771] bridge_slave_0: entered allmulticast mode [ 94.408103][ T5771] bridge_slave_0: entered promiscuous mode [ 94.419306][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.435933][ T5768] team0: Port device team_slave_1 added [ 94.446339][ T5769] team0: Port device team_slave_1 added [ 94.472551][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.483472][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.493813][ T5771] bridge_slave_1: entered allmulticast mode [ 94.504238][ T5771] bridge_slave_1: entered promiscuous mode [ 94.515813][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.599897][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.610194][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.643458][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.664594][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.672928][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.707625][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.721260][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.729240][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.761586][ T5780] Bluetooth: hci0: command tx timeout [ 94.768447][ T5768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.801358][ T5776] team0: Port device team_slave_0 added [ 94.813627][ T5780] Bluetooth: hci1: command tx timeout [ 94.827628][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.838024][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.865608][ T5768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.887459][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.896992][ T5780] Bluetooth: hci3: command tx timeout [ 94.908724][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.920966][ T5776] team0: Port device team_slave_1 added [ 94.973809][ T5780] Bluetooth: hci2: command tx timeout [ 94.988680][ T5769] hsr_slave_0: entered promiscuous mode [ 94.999176][ T5769] hsr_slave_1: entered promiscuous mode [ 95.034915][ T5771] team0: Port device team_slave_0 added [ 95.078695][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.087101][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.117742][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.132503][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.139951][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.169207][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.185656][ T5771] team0: Port device team_slave_1 added [ 95.197225][ T5768] hsr_slave_0: entered promiscuous mode [ 95.207176][ T5768] hsr_slave_1: entered promiscuous mode [ 95.215470][ T5768] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.226031][ T5768] Cannot create hsr debugfs directory [ 95.316929][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.324954][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.354117][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.403136][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.410525][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.439798][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.535166][ T5776] hsr_slave_0: entered promiscuous mode [ 95.542891][ T5776] hsr_slave_1: entered promiscuous mode [ 95.552896][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.561205][ T5776] Cannot create hsr debugfs directory [ 95.646435][ T5771] hsr_slave_0: entered promiscuous mode [ 95.656825][ T5771] hsr_slave_1: entered promiscuous mode [ 95.664471][ T5771] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.673203][ T5771] Cannot create hsr debugfs directory [ 96.008198][ T5769] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 96.035174][ T5769] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 96.058389][ T5769] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 96.089108][ T5769] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 96.138577][ T5768] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 96.162007][ T5768] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 96.180084][ T5768] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 96.192507][ T5768] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 96.296617][ T5776] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 96.336758][ T5776] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 96.351587][ T5776] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 96.368977][ T5776] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 96.461978][ T5771] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 96.484449][ T5771] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 96.500212][ T5771] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 96.511961][ T5771] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 96.588754][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.650513][ T5769] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.702127][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.712700][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.721296][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.765750][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.773796][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.816697][ T5780] Bluetooth: hci0: command tx timeout [ 96.838714][ T5768] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.892195][ T2966] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.894321][ T5780] Bluetooth: hci1: command tx timeout [ 96.900743][ T2966] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.948220][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.956113][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.974344][ T5780] Bluetooth: hci3: command tx timeout [ 96.986127][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.008435][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.053972][ T5780] Bluetooth: hci2: command tx timeout [ 97.066983][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.111601][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.119133][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.178699][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.217866][ T2966] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.226520][ T2966] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.284684][ T1097] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.293771][ T1097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.344816][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.353710][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.524395][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.560185][ T5771] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 97.737348][ T5769] veth0_vlan: entered promiscuous mode [ 97.795701][ T5769] veth1_vlan: entered promiscuous mode [ 97.869408][ T9] cfg80211: failed to load regulatory.db [ 97.964887][ T5769] veth0_macvtap: entered promiscuous mode [ 98.001564][ T5769] veth1_macvtap: entered promiscuous mode [ 98.021926][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.100702][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.145433][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.179752][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.201293][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.225157][ T5769] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.239099][ T5769] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.252289][ T5769] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.264015][ T5769] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.377031][ T5768] veth0_vlan: entered promiscuous mode [ 98.470261][ T5768] veth1_vlan: entered promiscuous mode [ 98.493489][ T5771] veth0_vlan: entered promiscuous mode [ 98.518069][ T5771] veth1_vlan: entered promiscuous mode [ 98.566213][ T1097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.579806][ T1097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.617999][ T5776] veth0_vlan: entered promiscuous mode [ 98.638166][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.648250][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.702335][ T5776] veth1_vlan: entered promiscuous mode [ 98.739134][ T5768] veth0_macvtap: entered promiscuous mode [ 98.777633][ T5768] veth1_macvtap: entered promiscuous mode [ 98.807879][ T5771] veth0_macvtap: entered promiscuous mode [ 98.858462][ T5776] veth0_macvtap: entered promiscuous mode [ 98.877664][ T5771] veth1_macvtap: entered promiscuous mode [ 98.893224][ T5776] veth1_macvtap: entered promiscuous mode [ 98.900014][ T5780] Bluetooth: hci0: command tx timeout [ 98.932051][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.945753][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.958380][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.974964][ T5780] Bluetooth: hci1: command tx timeout [ 98.998361][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.010109][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.026943][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.053529][ T5780] Bluetooth: hci3: command tx timeout [ 99.078042][ T5768] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.090278][ T5768] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.107352][ T5768] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.118649][ T5768] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.134653][ T5780] Bluetooth: hci2: command tx timeout [ 99.172743][ T5836] netlink: 'syz.2.3': attribute type 1 has an invalid length. [ 99.194410][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.211886][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.233398][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.246291][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.264582][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.267286][ C0] hrtimer: interrupt took 84185 ns [ 99.280383][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.292151][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.305090][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.318208][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.338318][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.368695][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.381275][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.395325][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.407102][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.421078][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.435845][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.450112][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.491263][ T5771] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.503398][ T5771] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.513566][ T5771] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.523767][ T5771] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.542542][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.555415][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.571696][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.584215][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.598375][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.609729][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.625125][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.724647][ T5776] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.745088][ T5776] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.754685][ T5776] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.766722][ T5776] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.864211][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.899677][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.080591][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.103739][ T1097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.116218][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.138695][ T1097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.261076][ T5050] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.296725][ T5050] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.439314][ T5050] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.466145][ T1097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.487732][ T5050] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.511806][ T1097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.619835][ T5845] warning: `syz.2.6' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 100.977276][ T5780] Bluetooth: hci0: command tx timeout [ 101.058880][ T5780] Bluetooth: hci1: command tx timeout [ 101.139590][ T5780] Bluetooth: hci3: command tx timeout [ 101.220131][ T5780] Bluetooth: hci2: command tx timeout [ 101.772583][ T5852] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 101.782171][ T5852] IPv6: NLM_F_CREATE should be set when creating new route [ 101.792709][ T5852] IPv6: NLM_F_CREATE should be set when creating new route [ 101.802309][ T5852] IPv6: NLM_F_CREATE should be set when creating new route [ 102.487441][ T5861] netlink: 'syz.3.10': attribute type 1 has an invalid length. [ 102.509832][ T5855] netlink: 'syz.0.8': attribute type 10 has an invalid length. [ 102.517153][ T5861] netlink: 'syz.3.10': attribute type 3 has an invalid length. [ 102.542170][ T5861] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10'. [ 103.021697][ T5871] Zero length message leads to an empty skb [ 103.204184][ T5869] netlink: 65027 bytes leftover after parsing attributes in process `syz.1.12'. [ 103.217036][ T5867] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.11'. [ 103.316908][ T5855] syz.0.8 (5855) used greatest stack depth: 20008 bytes left [ 103.481528][ T5876] netlink: 'syz.0.14': attribute type 16 has an invalid length. [ 103.510876][ T5876] netlink: 48 bytes leftover after parsing attributes in process `syz.0.14'. [ 103.542859][ T5874] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.13'. [ 103.662340][ T5780] Bluetooth: hci1: unexpected event 0x08 length: 15 > 4 [ 103.837344][ T5882] syz.1.16: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 103.902631][ T5882] CPU: 0 PID: 5882 Comm: syz.1.16 Not tainted syzkaller #0 [ 103.910729][ T5882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 103.921602][ T5882] Call Trace: [ 103.925200][ T5882] [ 103.928532][ T5882] dump_stack_lvl+0x18c/0x250 [ 103.933407][ T5882] ? show_regs_print_info+0x20/0x20 [ 103.938983][ T5882] ? load_image+0x400/0x400 [ 103.944044][ T5882] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 103.950875][ T5882] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 103.958628][ T5882] warn_alloc+0x246/0x340 [ 103.963386][ T5882] ? stack_trace_save+0xaa/0x100 [ 103.969060][ T5882] ? zone_watermark_ok_safe+0x230/0x230 [ 103.975310][ T5882] ? kasan_set_track+0x5f/0x70 [ 103.980395][ T5882] ? kasan_set_track+0x4e/0x70 [ 103.985923][ T5882] ? __kasan_kmalloc+0x8f/0xa0 [ 103.991011][ T5882] ? xsk_init_queue+0xad/0x100 [ 103.996116][ T5882] ? xsk_setsockopt+0x4e5/0x760 [ 104.001171][ T5882] ? do_sock_setsockopt+0x175/0x1a0 [ 104.006701][ T5882] ? __x64_sys_setsockopt+0x182/0x200 [ 104.012156][ T5882] __vmalloc_node_range+0x126/0x1330 [ 104.017806][ T5882] ? free_vm_area+0x50/0x50 [ 104.022382][ T5882] vmalloc_user+0x74/0x80 [ 104.027147][ T5882] ? xskq_create+0xbf/0x170 [ 104.032077][ T5882] xskq_create+0xbf/0x170 [ 104.037119][ T5882] xsk_init_queue+0xad/0x100 [ 104.041927][ T5882] xsk_setsockopt+0x4e5/0x760 [ 104.047423][ T5882] ? xsk_poll+0x680/0x680 [ 104.052097][ T5882] ? __fget_files+0x28/0x4b0 [ 104.057198][ T5882] ? __fget_files+0x28/0x4b0 [ 104.062009][ T5882] ? aa_sock_opt_perm+0x74/0x100 [ 104.067098][ T5882] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 104.074455][ T5882] ? security_socket_setsockopt+0x7e/0xa0 [ 104.081608][ T5882] ? xsk_poll+0x680/0x680 [ 104.086280][ T5882] do_sock_setsockopt+0x175/0x1a0 [ 104.091599][ T5882] ? __fdget+0x180/0x210 [ 104.096674][ T5882] __x64_sys_setsockopt+0x182/0x200 [ 104.102120][ T5882] do_syscall_64+0x55/0xa0 [ 104.106988][ T5882] ? clear_bhb_loop+0x40/0x90 [ 104.112137][ T5882] ? clear_bhb_loop+0x40/0x90 [ 104.118001][ T5882] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 104.125835][ T5882] RIP: 0033:0x7f9646b9c799 [ 104.130939][ T5882] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.152293][ T5882] RSP: 002b:00007f9647b3f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 104.161303][ T5882] RAX: ffffffffffffffda RBX: 00007f9646e15fa0 RCX: 00007f9646b9c799 [ 104.169512][ T5882] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006 [ 104.178464][ T5882] RBP: 00007f9646c32c99 R08: 0000000000000004 R09: 0000000000000000 [ 104.186851][ T5882] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 104.194977][ T5882] R13: 00007f9646e16038 R14: 00007f9646e15fa0 R15: 00007ffe06ddc288 [ 104.203202][ T5882] [ 104.269130][ T5882] Mem-Info: [ 104.272395][ T5882] active_anon:5458 inactive_anon:0 isolated_anon:0 [ 104.272395][ T5882] active_file:853 inactive_file:39927 isolated_file:0 [ 104.272395][ T5882] unevictable:768 dirty:1563 writeback:0 [ 104.272395][ T5882] slab_reclaimable:9936 slab_unreclaimable:90322 [ 104.272395][ T5882] mapped:24858 shmem:1361 pagetables:571 [ 104.272395][ T5882] sec_pagetables:0 bounce:0 [ 104.272395][ T5882] kernel_misc_reclaimable:0 [ 104.272395][ T5882] free:1368829 free_pcp:11542 free_cma:0 [ 104.355416][ T5882] Node 0 active_anon:21832kB inactive_anon:0kB active_file:3412kB inactive_file:159508kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:100532kB dirty:6244kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10584kB pagetables:2284kB sec_pagetables:0kB all_unreclaimable? no [ 104.456196][ T5884] netlink: 'syz.3.17': attribute type 39 has an invalid length. [ 104.494196][ T5882] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 104.494294][ T5882] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 104.494378][ T5882] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 104.494644][ T5882] Node 0 DMA32 free:1563344kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:21888kB inactive_anon:0kB active_file:3412kB inactive_file:158684kB unevictable:1536kB writepending:6228kB present:3129332kB managed:2586964kB mlocked:0kB bounce:0kB free_pcp:23812kB local_pcp:7024kB free_cma:0kB [ 104.494731][ T5882] lowmem_reserve[]: 0 0 0 0 0 [ 104.494854][ T5882] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:16kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 104.494934][ T5882] lowmem_reserve[]: 0 0 0 0 0 [ 104.495054][ T5882] Node 1 Normal free:3896164kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:8kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:22424kB local_pcp:8248kB free_cma:0kB [ 104.495136][ T5882] lowmem_reserve[]: 0 0 0 0 0 [ 104.495281][ T5882] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 104.495690][ T5882] Node 0 DMA32: 2*4kB (ME) 1*8kB (E) 0*16kB 0*32kB 1*64kB (U) 1*128kB (U) 2*256kB (ME) 2*512kB (M) 5*1024kB (UME) 6*2048kB (UME) 377*4096kB (M) = 1563344kB [ 104.496130][ T5882] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 104.496459][ T5882] Node 1 Normal: 177*4kB (UE) 62*8kB (UE) 43*16kB (UE) 58*32kB (UE) 13*64kB (UME) 5*128kB (UME) 1*256kB (E) 3*512kB (UME) 2*1024kB (UE) 2*2048kB (UE) 948*4096kB (M) = 3896164kB [ 104.496932][ T5882] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 104.496961][ T5882] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 104.496996][ T5882] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 104.497024][ T5882] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 104.497052][ T5882] 42145 total pagecache pages [ 104.497076][ T5882] 0 pages in swap cache [ 104.497095][ T5882] Free swap = 124996kB [ 104.497113][ T5882] Total swap = 124996kB [ 104.497133][ T5882] 2097051 pages RAM [ 104.497151][ T5882] 0 pages HighMem/MovableOnly [ 104.497176][ T5882] 416924 pages reserved [ 104.497196][ T5882] 0 pages cma reserved [ 105.412148][ T5882] netlink: 'syz.1.16': attribute type 1 has an invalid length. [ 105.470483][ T5882] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.16'. [ 105.661852][ T5898] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 105.694497][ T5780] Bluetooth: hci1: command 0x0406 tx timeout [ 106.690541][ T5917] tap0: tun_chr_ioctl cmd 1074025675 [ 106.712868][ T5917] tap0: persist enabled [ 106.826357][ T5915] tap0: tun_chr_ioctl cmd 21731 [ 106.912851][ T5916] tap0: tun_chr_ioctl cmd 1074025675 [ 106.942590][ T5916] tap0: persist enabled [ 107.565180][ T5925] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.27'. [ 107.598558][ T5922] bridge0: port 3(erspan0) entered blocking state [ 107.619115][ T5922] bridge0: port 3(erspan0) entered disabled state [ 107.664627][ T5922] erspan0: entered allmulticast mode [ 107.764164][ T5922] erspan0: entered promiscuous mode [ 107.805565][ T5922] bridge0: port 3(erspan0) entered blocking state [ 107.815396][ T5922] bridge0: port 3(erspan0) entered forwarding state [ 108.137351][ T5936] netlink: 'syz.2.31': attribute type 39 has an invalid length. [ 108.217366][ T5942] netlink: 'syz.3.33': attribute type 1 has an invalid length. [ 109.233911][ T5951] tap0: tun_chr_ioctl cmd 1074025675 [ 109.239656][ T5951] tap0: persist enabled [ 109.251496][ T5951] tap0: tun_chr_ioctl cmd 1074025675 [ 109.261673][ T5951] tap0: persist enabled [ 109.270134][ T5951] tap0: tun_chr_ioctl cmd 21731 [ 109.277717][ T5951] tap0: tun_chr_ioctl cmd 1074025675 [ 109.284623][ T5951] tap0: persist enabled [ 109.599434][ T5962] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 109.607175][ T5962] IPv6: NLM_F_CREATE should be set when creating new route [ 109.614806][ T5962] IPv6: NLM_F_CREATE should be set when creating new route [ 109.622297][ T5962] IPv6: NLM_F_CREATE should be set when creating new route [ 111.502324][ T5964] bridge0: port 3(erspan0) entered blocking state [ 111.509860][ T5964] bridge0: port 3(erspan0) entered disabled state [ 111.518107][ T5964] erspan0: entered allmulticast mode [ 111.526530][ T5964] erspan0: entered promiscuous mode [ 111.532847][ T5964] bridge0: port 3(erspan0) entered blocking state [ 111.540448][ T5964] bridge0: port 3(erspan0) entered forwarding state [ 111.860956][ T5974] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.41'. [ 112.019309][ T5981] netlink: 65027 bytes leftover after parsing attributes in process `syz.2.43'. [ 112.079858][ T5980] netlink: 'syz.1.42': attribute type 39 has an invalid length. [ 112.827708][ T5994] netlink: 'syz.2.55': attribute type 39 has an invalid length. [ 112.954476][ T5990] netlink: 'syz.1.46': attribute type 10 has an invalid length. [ 113.757036][ T6000] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.47'. [ 114.003033][ T6008] netlink: 'syz.1.60': attribute type 39 has an invalid length. [ 114.269342][ T6015] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 114.278220][ T6015] IPv6: NLM_F_CREATE should be set when creating new route [ 114.287226][ T6015] IPv6: NLM_F_CREATE should be set when creating new route [ 114.295712][ T6015] IPv6: NLM_F_CREATE should be set when creating new route [ 114.338027][ T6012] bridge0: port 3(erspan0) entered blocking state [ 114.364453][ T6012] bridge0: port 3(erspan0) entered disabled state [ 114.389283][ T6012] erspan0: entered allmulticast mode [ 114.512519][ T6012] erspan0: entered promiscuous mode [ 114.596750][ T6012] bridge0: port 3(erspan0) entered blocking state [ 114.609966][ T6012] bridge0: port 3(erspan0) entered forwarding state [ 115.024886][ T6024] netlink: 60 bytes leftover after parsing attributes in process `syz.0.63'. [ 115.036602][ T6024] netlink: 60 bytes leftover after parsing attributes in process `syz.0.63'. [ 115.051918][ T6024] netlink: 60 bytes leftover after parsing attributes in process `syz.0.63'. [ 116.284939][ T6034] syzkaller0: entered promiscuous mode [ 116.295555][ T6034] syzkaller0: entered allmulticast mode [ 118.307431][ T6037] netlink: 'syz.2.61': attribute type 10 has an invalid length. [ 118.549878][ T6043] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.62'. [ 118.599181][ T6060] netlink: 'syz.1.65': attribute type 39 has an invalid length. [ 119.153504][ T5772] Bluetooth: hci3: unexpected event 0x08 length: 15 > 4 [ 120.690053][ T6063] syzkaller0: entered promiscuous mode [ 120.718942][ T6063] syzkaller0: entered allmulticast mode [ 121.220680][ T5772] Bluetooth: hci3: command 0x0406 tx timeout [ 124.003669][ T6099] Illegal XDP return value 98 on prog (id 63) dev N/A, expect packet loss! [ 124.096131][ T6104] netlink: 'syz.3.76': attribute type 39 has an invalid length. [ 125.732655][ T6110] syzkaller0: entered promiscuous mode [ 125.772924][ T6110] syzkaller0: entered allmulticast mode [ 127.908579][ T6124] netlink: 44 bytes leftover after parsing attributes in process `syz.0.81'. [ 127.919433][ T6130] netlink: 132 bytes leftover after parsing attributes in process `syz.3.83'. [ 127.944372][ T6135] netlink: 'syz.1.86': attribute type 10 has an invalid length. [ 127.979176][ T6135] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 128.320720][ T6140] netlink: 'syz.0.87': attribute type 12 has an invalid length. [ 128.359783][ T6140] netlink: 132 bytes leftover after parsing attributes in process `syz.0.87'. [ 128.393487][ T6145] netlink: 'syz.0.87': attribute type 10 has an invalid length. [ 128.594966][ T6145] team0: Device hsr_slave_0 failed to register rx_handler [ 129.216152][ T6155] netlink: 'syz.1.90': attribute type 39 has an invalid length. [ 129.510239][ T6160] syz.1.92 uses obsolete (PF_INET,SOCK_PACKET) [ 129.855566][ T6168] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.94'. [ 129.882150][ T6168] netlink: 6324 bytes leftover after parsing attributes in process `syz.2.94'. [ 129.912638][ T6168] netlink: 2 bytes leftover after parsing attributes in process `syz.2.94'. [ 130.787398][ T6175] syzkaller0: entered promiscuous mode [ 130.813855][ T6175] syzkaller0: entered allmulticast mode [ 131.044612][ T6192] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.99'. [ 131.170884][ T6186] netlink: 'syz.1.100': attribute type 39 has an invalid length. [ 131.180064][ T6192] netlink: 21068 bytes leftover after parsing attributes in process `syz.3.99'. [ 131.203430][ T6192] tipc: Started in network mode [ 131.222407][ T6192] tipc: Node identity b, cluster identity 73 [ 131.230511][ T6192] tipc: Node number set to 11 [ 131.380328][ T6193] netlink: 'syz.2.101': attribute type 29 has an invalid length. [ 133.395663][ T6193] netlink: 'syz.2.101': attribute type 29 has an invalid length. [ 133.406151][ T6207] netlink: 132 bytes leftover after parsing attributes in process `syz.2.101'. [ 133.549376][ T6214] netlink: 830 bytes leftover after parsing attributes in process `syz.3.103'. [ 133.593436][ T6214] veth0_to_bond: entered promiscuous mode [ 133.675456][ T6219] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.104'. [ 133.704142][ T6222] netlink: 4068 bytes leftover after parsing attributes in process `syz.2.106'. [ 133.714158][ T6219] openvswitch: netlink: Flow key attribute not present in set flow. [ 133.715240][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.741022][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.765688][ T6223] netlink: 668 bytes leftover after parsing attributes in process `syz.1.104'. [ 133.821540][ T6223] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 133.873548][ T6223] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 134.074357][ T6238] netlink: 'syz.2.110': attribute type 39 has an invalid length. [ 134.219647][ T6246] veth1_macvtap: left promiscuous mode [ 134.237071][ T6246] macsec0: entered allmulticast mode [ 134.270825][ T6244] C: renamed from team_slave_0 (while UP) [ 134.291604][ T6244] netlink: 'syz.1.112': attribute type 2 has an invalid length. [ 134.323864][ T6244] netlink: 116 bytes leftover after parsing attributes in process `syz.1.112'. [ 134.344917][ T6244] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 134.372720][ T6246] wg1: entered promiscuous mode [ 134.566507][ T5780] Bluetooth: hci3: ISO packet for unknown connection handle 6 [ 134.690991][ T6255] tap0: tun_chr_ioctl cmd 1074025680 [ 135.207294][ T6271] netlink: 'syz.2.122': attribute type 39 has an invalid length. [ 136.014974][ T6280] netlink: 60 bytes leftover after parsing attributes in process `syz.2.124'. [ 136.042594][ T6280] netlink: 60 bytes leftover after parsing attributes in process `syz.2.124'. [ 136.073928][ T6284] netlink: 132 bytes leftover after parsing attributes in process `syz.1.125'. [ 136.283971][ T6284] syzkaller0: entered promiscuous mode [ 136.303643][ T6284] syzkaller0: entered allmulticast mode [ 137.109486][ T6309] netlink: 'syz.1.133': attribute type 39 has an invalid length. [ 137.784487][ T6319] netlink: 'syz.1.136': attribute type 12 has an invalid length. [ 137.792810][ T6319] netlink: 132 bytes leftover after parsing attributes in process `syz.1.136'. [ 137.858333][ T6319] netlink: 'syz.1.136': attribute type 10 has an invalid length. [ 138.250952][ T6319] team0: Device hsr_slave_0 failed to register rx_handler [ 138.526077][ T6315] netlink: 'syz.3.135': attribute type 10 has an invalid length. [ 138.666825][ T6319] syz.1.136 (6319) used greatest stack depth: 19048 bytes left [ 138.692538][ T6315] team0: Device ipvlan1 failed to register rx_handler [ 139.202668][ T6337] netlink: 60 bytes leftover after parsing attributes in process `syz.3.141'. [ 139.264000][ T6337] netlink: 60 bytes leftover after parsing attributes in process `syz.3.141'. [ 139.289075][ T6336] netlink: 60 bytes leftover after parsing attributes in process `syz.3.141'. [ 139.346794][ T6340] netlink: 12 bytes leftover after parsing attributes in process `syz.2.142'. [ 139.386042][ T6341] netlink: 60 bytes leftover after parsing attributes in process `syz.3.141'. [ 139.578260][ T6345] netlink: 'syz.0.143': attribute type 21 has an invalid length. [ 139.628554][ T6345] netlink: 'syz.0.143': attribute type 6 has an invalid length. [ 139.663757][ T6345] netlink: 132 bytes leftover after parsing attributes in process `syz.0.143'. [ 139.708826][ T6348] netlink: 'syz.3.144': attribute type 39 has an invalid length. [ 139.883596][ T6354] netlink: 22 bytes leftover after parsing attributes in process `syz.0.146'. [ 140.191038][ T6363] netlink: 'syz.2.149': attribute type 29 has an invalid length. [ 140.212351][ T6363] netlink: 'syz.2.149': attribute type 29 has an invalid length. [ 140.226864][ T6372] netlink: 'syz.2.149': attribute type 29 has an invalid length. [ 140.260331][ T6363] netlink: 'syz.2.149': attribute type 29 has an invalid length. [ 140.294901][ T6363] netlink: 'syz.2.149': attribute type 29 has an invalid length. [ 140.549363][ T6379] netlink: 'syz.3.155': attribute type 39 has an invalid length. [ 140.568016][ T6380] netlink: 3403 bytes leftover after parsing attributes in process `syz.0.153'. [ 140.800644][ T6389] netlink: 'syz.1.154': attribute type 5 has an invalid length. [ 140.816995][ T5780] Bluetooth: hci1: unexpected event 0x08 length: 15 > 4 [ 141.003583][ T6394] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.158'. [ 141.196672][ T6394] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.158'. [ 141.908624][ T5780] Bluetooth: hci1: unexpected event 0x08 length: 15 > 4 [ 142.395630][ T6434] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 142.428772][ T6434] syzkaller0: entered promiscuous mode [ 142.436258][ T6434] syzkaller0: entered allmulticast mode [ 143.494873][ T5780] Bluetooth: hci0: unexpected event 0x08 length: 15 > 4 [ 145.533500][ T5780] Bluetooth: hci0: command 0x0406 tx timeout [ 149.049347][ T6473] netlink: 168 bytes leftover after parsing attributes in process `syz.3.185'. [ 149.227687][ T5772] Bluetooth: hci3: unexpected event 0x08 length: 15 > 4 [ 149.677261][ T6519] validate_nla: 1 callbacks suppressed [ 149.677278][ T6519] netlink: 'syz.3.199': attribute type 2 has an invalid length. [ 149.768392][ T6520] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.199'. [ 149.802779][ T6519] netlink: 'syz.3.199': attribute type 1 has an invalid length. [ 149.842166][ T6519] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.199'. [ 149.919729][ T6524] netlink: 'syz.3.199': attribute type 13 has an invalid length. [ 150.303402][ T5772] Bluetooth: hci3: ISO packet for unknown connection handle 2622 [ 150.717582][ T5772] Bluetooth: hci0: unexpected event 0x08 length: 15 > 4 [ 151.148447][ T6560] wg2: entered promiscuous mode [ 151.183718][ T6560] wg2: entered allmulticast mode [ 151.527454][ T6574] sctp: [Deprecated]: syz.2.214 (pid 6574) Use of struct sctp_assoc_value in delayed_ack socket option. [ 151.527454][ T6574] Use struct sctp_sack_info instead [ 152.336892][ T5772] Bluetooth: hci2: unexpected event 0x08 length: 15 > 4 [ 152.365521][ T6596] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 152.534990][ T6596] syzkaller0: entered promiscuous mode [ 152.584570][ T6596] syzkaller0: entered allmulticast mode [ 154.413442][ T5772] Bluetooth: hci2: command 0x0406 tx timeout [ 155.496828][ T6607] netlink: 'syz.1.226': attribute type 33 has an invalid length. [ 155.508192][ T6607] netlink: 152 bytes leftover after parsing attributes in process `syz.1.226'. [ 155.517460][ T6607] `: renamed from team0 (while UP) [ 155.526768][ T6614] netlink: 'syz.0.227': attribute type 21 has an invalid length. [ 155.535271][ T6614] netlink: 156 bytes leftover after parsing attributes in process `syz.0.227'. [ 156.026990][ T6629] netlink: 'syz.1.233': attribute type 21 has an invalid length. [ 156.069619][ T6629] IPv6: NLM_F_CREATE should be specified when creating new route [ 156.331674][ T6629] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.233'. [ 156.471240][ T6632] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 157.011913][ T5780] Bluetooth: hci3: unexpected event 0x08 length: 15 > 4 [ 157.111602][ T6640] netlink: 144 bytes leftover after parsing attributes in process `syz.2.234'. [ 157.414748][ T6645] netlink: 'syz.1.236': attribute type 2 has an invalid length. [ 157.946993][ T6652] netlink: 60 bytes leftover after parsing attributes in process `syz.1.238'. [ 157.973930][ T6652] netlink: 60 bytes leftover after parsing attributes in process `syz.1.238'. [ 158.019826][ T6652] netlink: 60 bytes leftover after parsing attributes in process `syz.1.238'. [ 158.048260][ T6654] syz.3.239: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 158.071879][ T6658] netlink: 60 bytes leftover after parsing attributes in process `syz.1.238'. [ 158.075300][ T6654] CPU: 0 PID: 6654 Comm: syz.3.239 Not tainted syzkaller #0 [ 158.088615][ T6654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 158.098915][ T6654] Call Trace: [ 158.102265][ T6654] [ 158.105434][ T6654] dump_stack_lvl+0x18c/0x250 [ 158.110181][ T6654] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 158.116844][ T6654] ? show_regs_print_info+0x20/0x20 [ 158.122078][ T6654] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 158.128299][ T6654] warn_alloc+0x246/0x340 [ 158.132705][ T6654] ? stack_trace_save+0xaa/0x100 [ 158.137729][ T6654] ? zone_watermark_ok_safe+0x230/0x230 [ 158.143355][ T6654] ? kasan_set_track+0x5f/0x70 [ 158.148198][ T6654] ? kasan_set_track+0x4e/0x70 [ 158.153003][ T6654] ? __kasan_kmalloc+0x8f/0xa0 [ 158.157803][ T6654] ? xsk_init_queue+0xad/0x100 [ 158.162616][ T6654] ? xsk_setsockopt+0x4e5/0x760 [ 158.167523][ T6654] ? do_sock_setsockopt+0x175/0x1a0 [ 158.172753][ T6654] ? __x64_sys_setsockopt+0x182/0x200 [ 158.178159][ T6654] __vmalloc_node_range+0x126/0x1330 [ 158.183512][ T6654] ? free_vm_area+0x50/0x50 [ 158.188071][ T6654] vmalloc_user+0x74/0x80 [ 158.192445][ T6654] ? xskq_create+0xbf/0x170 [ 158.197079][ T6654] xskq_create+0xbf/0x170 [ 158.201492][ T6654] xsk_init_queue+0xad/0x100 [ 158.206146][ T6654] xsk_setsockopt+0x4e5/0x760 [ 158.210975][ T6654] ? xsk_poll+0x680/0x680 [ 158.215338][ T6654] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 158.221628][ T6654] ? do_sock_setsockopt+0xa5/0x1a0 [ 158.226924][ T6654] ? xsk_poll+0x680/0x680 [ 158.231313][ T6654] do_sock_setsockopt+0x175/0x1a0 [ 158.236383][ T6654] ? __fdget+0x180/0x210 [ 158.240673][ T6654] __x64_sys_setsockopt+0x182/0x200 [ 158.245901][ T6654] do_syscall_64+0x55/0xa0 [ 158.250351][ T6654] ? clear_bhb_loop+0x40/0x90 [ 158.255072][ T6654] ? clear_bhb_loop+0x40/0x90 [ 158.259786][ T6654] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 158.266092][ T6654] RIP: 0033:0x7f0a6d99c799 [ 158.270770][ T6654] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.290526][ T6654] RSP: 002b:00007f0a6e928028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 158.298990][ T6654] RAX: ffffffffffffffda RBX: 00007f0a6dc15fa0 RCX: 00007f0a6d99c799 [ 158.307089][ T6654] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000007 [ 158.315391][ T6654] RBP: 00007f0a6da32c99 R08: 0000000000000004 R09: 0000000000000000 [ 158.323498][ T6654] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 158.331872][ T6654] R13: 00007f0a6dc16038 R14: 00007f0a6dc15fa0 R15: 00007ffe5a25e918 [ 158.339905][ T6654] [ 158.400415][ T6654] Mem-Info: [ 158.404497][ T6654] active_anon:5317 inactive_anon:0 isolated_anon:0 [ 158.404497][ T6654] active_file:10886 inactive_file:39951 isolated_file:0 [ 158.404497][ T6654] unevictable:768 dirty:67 writeback:0 [ 158.404497][ T6654] slab_reclaimable:9863 slab_unreclaimable:91239 [ 158.404497][ T6654] mapped:24677 shmem:1361 pagetables:547 [ 158.404497][ T6654] sec_pagetables:0 bounce:0 [ 158.404497][ T6654] kernel_misc_reclaimable:0 [ 158.404497][ T6654] free:1361043 free_pcp:9017 free_cma:0 [ 158.455494][ T6654] Node 0 active_anon:21268kB inactive_anon:0kB active_file:43544kB inactive_file:159604kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:100508kB dirty:268kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10736kB pagetables:2188kB sec_pagetables:0kB all_unreclaimable? no [ 158.553142][ T6654] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 158.618374][ T6663] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x31 [ 158.664955][ T6654] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 158.674537][ T6665] netlink: 'syz.1.242': attribute type 2 has an invalid length. [ 158.707539][ T6654] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 158.714645][ T6654] Node 0 DMA32 free:1531348kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:21024kB inactive_anon:0kB active_file:43544kB inactive_file:158780kB unevictable:1536kB writepending:268kB present:3129332kB managed:2586964kB mlocked:0kB bounce:0kB free_pcp:15952kB local_pcp:7616kB free_cma:0kB [ 158.726493][ T6663] netlink: 164 bytes leftover after parsing attributes in process `syz.2.241'. [ 158.749079][ T6665] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.242'. [ 158.771201][ T6654] lowmem_reserve[]: 0 0 0 0 0 [ 158.779054][ T6654] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 158.863503][ T6654] lowmem_reserve[]: 0 0 0 0 0 [ 158.869190][ T6654] Node 1 Normal free:3897212kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:21472kB local_pcp:7168kB free_cma:0kB [ 158.955173][ T6654] lowmem_reserve[]: 0 0 0 0 0 [ 158.975998][ T6654] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 158.994918][ T6654] Node 0 DMA32: 1826*4kB (UME) 1626*8kB (UME) 967*16kB (UME) 682*32kB (UME) 347*64kB (UME) 53*128kB (UME) 15*256kB (UM) 4*512kB (UM) 4*1024kB (UME) 4*2048kB (UME) 348*4096kB (M) = 1530184kB [ 159.022578][ T6654] Node 0 Normal: 0*4kB 0*8kB 0*16kB [ 159.037361][ T6669] netlink: 'syz.1.244': attribute type 5 has an invalid length. [ 159.063850][ T6654] 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 159.072898][ T6654] Node 1 Normal: 239*4kB (UE) 62*8kB (UE) 43*16kB (UE) 79*32kB (UE) 15*64kB (UME) 5*128kB (UME) 1*256kB (E) 3*512kB (UME) 2*1024kB (UE) 2*2048kB (UE) 948*4096kB (M) = 3897212kB [ 159.110912][ T6654] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 159.147239][ T6654] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 159.243440][ T6654] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 159.273292][ T6654] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 159.305037][ T6654] 52198 total pagecache pages [ 159.309818][ T6654] 0 pages in swap cache [ 159.323778][ T6654] Free swap = 124996kB [ 159.328030][ T6654] Total swap = 124996kB [ 159.332235][ T6654] 2097051 pages RAM [ 159.403439][ T6654] 0 pages HighMem/MovableOnly [ 159.438858][ T6654] 416924 pages reserved [ 159.443149][ T6654] 0 pages cma reserved [ 159.783886][ T6691] netlink: 'syz.2.250': attribute type 29 has an invalid length. [ 159.792525][ T6691] netlink: 'syz.2.250': attribute type 29 has an invalid length. [ 159.812235][ T6691] netlink: 'syz.2.250': attribute type 29 has an invalid length. [ 159.828452][ T6691] netlink: 'syz.2.250': attribute type 29 has an invalid length. [ 159.889516][ T6694] Q6`Ҙ: renamed from lo (while UP) [ 160.029382][ T5780] Bluetooth: hci3: unexpected event 0x08 length: 15 > 4 [ 161.020738][ T6757] __nla_validate_parse: 2 callbacks suppressed [ 161.020755][ T6757] netlink: 15231 bytes leftover after parsing attributes in process `syz.3.265'. [ 161.098985][ T5780] Bluetooth: hci2: unexpected event 0x08 length: 15 > 4 [ 162.190267][ T6779] IPv6: Can't replace route, no match found [ 162.220977][ T5780] Bluetooth: hci1: ISO packet for unknown connection handle 8 [ 162.446226][ T6791] C: renamed from team_slave_0 (while UP) [ 162.459791][ T6791] validate_nla: 4 callbacks suppressed [ 162.459806][ T6791] netlink: 'syz.0.276': attribute type 1 has an invalid length. [ 162.488741][ T6791] netlink: 152 bytes leftover after parsing attributes in process `syz.0.276'. [ 162.561732][ T5780] Bluetooth: hci3: unexpected event 0x08 length: 15 > 4 [ 163.512165][ T5780] Bluetooth: hci1: unexpected event 0x08 length: 15 > 4 [ 163.598446][ T6833] netlink: 'syz.3.291': attribute type 8 has an invalid length. [ 163.627219][ T6833] netlink: 156 bytes leftover after parsing attributes in process `syz.3.291'. [ 163.918665][ T6850] netlink: 'syz.0.294': attribute type 21 has an invalid length. [ 164.402846][ T6864] netlink: 'syz.3.302': attribute type 13 has an invalid length. [ 164.432535][ T6864] netlink: 164 bytes leftover after parsing attributes in process `syz.3.302'. [ 164.470613][ T6864] syz_tun: refused to change device tx_queue_len [ 164.499838][ T6868] netlink: 'syz.2.303': attribute type 21 has an invalid length. [ 164.540902][ T5780] Bluetooth: hci2: unexpected event 0x08 length: 15 > 4 [ 164.543692][ T6864] netlink: 'syz.3.302': attribute type 11 has an invalid length. [ 164.758773][ T6876] netlink: 'syz.2.307': attribute type 3 has an invalid length. [ 164.773766][ T6876] netlink: 'syz.2.307': attribute type 1 has an invalid length. [ 164.796253][ T6876] netlink: 198800 bytes leftover after parsing attributes in process `syz.2.307'. [ 164.869433][ T6879] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 165.011710][ T6884] netlink: 'syz.1.310': attribute type 1 has an invalid length. [ 165.026680][ T6884] netlink: 191376 bytes leftover after parsing attributes in process `syz.1.310'. [ 165.375042][ T6895] netlink: 'syz.1.314': attribute type 4 has an invalid length. [ 165.383132][ T6895] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.314'. [ 165.651552][ T5780] Bluetooth: hci0: unexpected event 0x08 length: 15 > 4 [ 166.723056][ T6929] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.322'. [ 167.277757][ T6955] bridge_slave_1: left allmulticast mode [ 167.311583][ T6955] bridge_slave_1: left promiscuous mode [ 167.406760][ T6955] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.432107][ T5780] Bluetooth: hci1: unexpected event 0x08 length: 15 > 4 [ 167.532072][ T6955] bridge_slave_0: left allmulticast mode [ 167.564911][ T6955] bridge_slave_0: left promiscuous mode [ 167.572660][ T6955] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.794387][ T6972] netlink: 'syz.0.333': attribute type 2 has an invalid length. [ 167.892088][ T6972] netlink: 14 bytes leftover after parsing attributes in process `syz.0.333'. [ 168.464121][ T6965] netlink: 12 bytes leftover after parsing attributes in process `syz.3.330'. [ 169.339820][ T5780] Bluetooth: hci1: unexpected event 0x08 length: 15 > 4 [ 170.037345][ T7015] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.348'. [ 170.465889][ T7028] netlink: 64 bytes leftover after parsing attributes in process `syz.3.351'. [ 170.655525][ T7014] delete_channel: no stack [ 171.348335][ T7037] : port 1(ip6gretap0) entered blocking state [ 171.360024][ T7037] : port 1(ip6gretap0) entered disabled state [ 171.371207][ T7037] ip6gretap0: entered allmulticast mode [ 171.387864][ T7037] ip6gretap0: entered promiscuous mode [ 171.432041][ T7037] ip6gretap0: left allmulticast mode [ 171.453211][ T7037] ip6gretap0: left promiscuous mode [ 171.466963][ T7037] : port 1(ip6gretap0) entered disabled state [ 171.583097][ T7041] netlink: 1 bytes leftover after parsing attributes in process `syz.3.354'. [ 171.697116][ T5780] Bluetooth: hci2: unexpected event 0x08 length: 15 > 4 [ 171.889889][ T7051] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.358'. [ 171.918081][ T7051] netlink: 6324 bytes leftover after parsing attributes in process `syz.2.358'. [ 172.155308][ T7057] netlink: 132 bytes leftover after parsing attributes in process `syz.0.361'. [ 172.407706][ T7064] netlink: 60 bytes leftover after parsing attributes in process `syz.0.363'. [ 172.422830][ T7064] netlink: 'syz.0.363': attribute type 13 has an invalid length. [ 172.433538][ T7064] netlink: 160 bytes leftover after parsing attributes in process `syz.0.363'. [ 172.456163][ T7064] bridge0: port 3(erspan0) entered disabled state [ 172.679349][ T7068] netlink: 'syz.0.365': attribute type 28 has an invalid length. [ 172.725062][ T7072] netlink: 'syz.1.367': attribute type 2 has an invalid length. [ 172.733039][ T7072] netlink: 'syz.1.367': attribute type 9 has an invalid length. [ 172.742893][ T7072] netlink: 'syz.1.367': attribute type 10 has an invalid length. [ 172.763410][ T7072] netlink: 'syz.1.367': attribute type 11 has an invalid length. [ 172.776755][ T7072] netlink: 16 bytes leftover after parsing attributes in process `syz.1.367'. [ 172.924897][ T5780] Bluetooth: hci2: unexpected event 0x08 length: 15 > 4 [ 173.274244][ T7080] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 173.390654][ T7095] netlink: 60931 bytes leftover after parsing attributes in process `syz.2.372'. [ 173.644409][ T7106] netlink: 60 bytes leftover after parsing attributes in process `syz.1.378'. [ 173.668212][ T7106] netlink: 60 bytes leftover after parsing attributes in process `syz.1.378'. [ 173.696823][ T7108] netlink: 132 bytes leftover after parsing attributes in process `syz.0.379'. [ 174.471602][ T5780] Bluetooth: hci0: unexpected event 0x08 length: 15 > 4 [ 176.949684][ T5780] Bluetooth: hci2: unexpected event 0x08 length: 15 > 4 [ 177.612691][ T7184] netlink: 'syz.1.403': attribute type 14 has an invalid length. [ 177.636426][ T7184] __nla_validate_parse: 3 callbacks suppressed [ 177.636446][ T7184] netlink: 164 bytes leftover after parsing attributes in process `syz.1.403'. [ 177.663109][ T7182] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.402'. [ 177.703719][ T7184] netlink: 'syz.1.403': attribute type 2 has an invalid length. [ 177.723488][ T7184] netlink: 14 bytes leftover after parsing attributes in process `syz.1.403'. [ 178.686786][ T5780] Bluetooth: hci0: unexpected event 0x08 length: 15 > 4 [ 178.828359][ T7209] netlink: 'syz.0.411': attribute type 22 has an invalid length. [ 179.330114][ T7227] netlink: 'syz.0.416': attribute type 10 has an invalid length. [ 179.656367][ T7227] team0: Device wg1 is of different type [ 180.157386][ T7250] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.423'. [ 180.188204][ T7250] netlink: 100 bytes leftover after parsing attributes in process `syz.1.423'. [ 180.281989][ T7252] netlink: 'syz.0.424': attribute type 3 has an invalid length. [ 180.349051][ T7252] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.424'. [ 180.432374][ T5780] Bluetooth: hci0: unexpected event 0x08 length: 15 > 4 [ 180.994861][ T7263] tap1: tun_chr_ioctl cmd 1074025677 [ 181.019891][ T7263] tap1: linktype set to 805 [ 181.051890][ T7263] tap1: tun_chr_ioctl cmd 1074025673 [ 181.107957][ T7264] tap1: tun_chr_ioctl cmd 1074025677 [ 181.149227][ T7264] tap1: linktype set to 805 [ 181.463879][ T5780] Bluetooth: hci2: ISO packet too small [ 181.800156][ T7280] netlink: 'syz.0.434': attribute type 4 has an invalid length. [ 181.821175][ T7280] erspan0: left allmulticast mode [ 181.830642][ T7280] erspan0: left promiscuous mode [ 181.838848][ T7280] bridge0: port 3(erspan0) entered disabled state [ 181.884624][ T7280] bridge_slave_1: left allmulticast mode [ 181.892340][ T7280] bridge_slave_1: left promiscuous mode [ 181.933684][ T7280] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.975119][ T7280] bridge_slave_0: left promiscuous mode [ 181.981005][ T7280] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.524444][ T5780] Bluetooth: hci3: unexpected event 0x08 length: 15 > 4 [ 183.580307][ T5780] Bluetooth: hci1: unexpected event 0x08 length: 15 > 4 [ 183.989304][ T7352] netlink: 'syz.2.457': attribute type 1 has an invalid length. [ 184.017393][ T7352] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.457'. [ 184.534538][ T7375] netlink: 'syz.3.462': attribute type 10 has an invalid length. [ 184.542412][ T7375] netlink: 40 bytes leftover after parsing attributes in process `syz.3.462'. [ 184.581962][ T7375] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 184.633531][ T7375] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.708699][ T7375] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 184.780156][ T5780] Bluetooth: hci1: unexpected event 0x08 length: 15 > 4 [ 185.653857][ T7412] netlink: 'syz.1.476': attribute type 1 has an invalid length. [ 186.283648][ T5780] Bluetooth: hci3: unexpected event 0x08 length: 15 > 4 [ 187.744077][ T7464] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 187.919129][ T5780] Bluetooth: hci0: unexpected event 0x08 length: 15 > 4 [ 187.972758][ T7484] FAULT_INJECTION: forcing a failure. [ 187.972758][ T7484] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 187.995906][ T7484] CPU: 1 PID: 7484 Comm: syz.2.496 Not tainted syzkaller #0 [ 188.003375][ T7484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 188.013779][ T7484] Call Trace: [ 188.017215][ T7484] [ 188.020916][ T7484] dump_stack_lvl+0x18c/0x250 [ 188.025887][ T7484] ? show_regs_print_info+0x20/0x20 [ 188.031195][ T7484] ? load_image+0x400/0x400 [ 188.035803][ T7484] ? __might_fault+0xaa/0x120 [ 188.040600][ T7484] ? __lock_acquire+0x7d40/0x7d40 [ 188.046431][ T7484] should_fail_ex+0x39d/0x4d0 [ 188.051920][ T7484] _copy_from_user+0x2f/0xe0 [ 188.056729][ T7484] ___sys_sendmsg+0x1c7/0x360 [ 188.061706][ T7484] ? __sys_sendmsg+0x2a0/0x2a0 [ 188.067158][ T7484] ? __lock_acquire+0x7d40/0x7d40 [ 188.073289][ T7484] __se_sys_sendmsg+0x1c2/0x2b0 [ 188.078347][ T7484] ? __x64_sys_sendmsg+0x80/0x80 [ 188.083514][ T7484] ? lockdep_hardirqs_on+0x98/0x150 [ 188.088853][ T7484] do_syscall_64+0x55/0xa0 [ 188.093638][ T7484] ? clear_bhb_loop+0x40/0x90 [ 188.098524][ T7484] ? clear_bhb_loop+0x40/0x90 [ 188.103383][ T7484] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 188.109643][ T7484] RIP: 0033:0x7fdd2519c799 [ 188.114209][ T7484] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.134697][ T7484] RSP: 002b:00007fdd25fea028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 188.143568][ T7484] RAX: ffffffffffffffda RBX: 00007fdd25415fa0 RCX: 00007fdd2519c799 [ 188.151622][ T7484] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 188.159807][ T7484] RBP: 00007fdd25fea090 R08: 0000000000000000 R09: 0000000000000000 [ 188.167877][ T7484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 188.176371][ T7484] R13: 00007fdd25416038 R14: 00007fdd25415fa0 R15: 00007ffe532dfcd8 [ 188.184920][ T7484] [ 188.240204][ T7481] netlink: 'syz.1.495': attribute type 39 has an invalid length. [ 188.924797][ T7505] netlink: 'syz.1.502': attribute type 39 has an invalid length. [ 189.468856][ T5780] Bluetooth: hci0: unexpected event 0x08 length: 15 > 4 [ 189.510993][ T7523] FAULT_INJECTION: forcing a failure. [ 189.510993][ T7523] name failslab, interval 1, probability 0, space 0, times 1 [ 189.564777][ T7523] CPU: 1 PID: 7523 Comm: syz.0.506 Not tainted syzkaller #0 [ 189.573892][ T7523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 189.584018][ T7523] Call Trace: [ 189.587339][ T7523] [ 189.590334][ T7523] dump_stack_lvl+0x18c/0x250 [ 189.595093][ T7523] ? show_regs_print_info+0x20/0x20 [ 189.600369][ T7523] ? load_image+0x400/0x400 [ 189.604965][ T7523] ? __might_sleep+0xe0/0xe0 [ 189.609625][ T7523] ? __lock_acquire+0x7d40/0x7d40 [ 189.614749][ T7523] should_fail_ex+0x39d/0x4d0 [ 189.620257][ T7523] should_failslab+0x9/0x20 [ 189.624833][ T7523] slab_pre_alloc_hook+0x59/0x310 [ 189.629927][ T7523] ? __lock_acquire+0x7d40/0x7d40 [ 189.635137][ T7523] kmem_cache_alloc_node+0x60/0x320 [ 189.640395][ T7523] ? __alloc_skb+0x103/0x2c0 [ 189.645589][ T7523] __alloc_skb+0x103/0x2c0 [ 189.650097][ T7523] netlink_sendmsg+0x66a/0xbf0 [ 189.654934][ T7523] ? perf_trace_lock+0x304/0x3b0 [ 189.660043][ T7523] ? netlink_getsockopt+0x590/0x590 [ 189.665306][ T7523] ? aa_sock_msg_perm+0x94/0x150 [ 189.670474][ T7523] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 189.676177][ T7523] ? security_socket_sendmsg+0x80/0xa0 [ 189.682054][ T7523] ? netlink_getsockopt+0x590/0x590 [ 189.687810][ T7523] ____sys_sendmsg+0x5ba/0x960 [ 189.692678][ T7523] ? __asan_memset+0x22/0x40 [ 189.697918][ T7523] ? __sys_sendmsg_sock+0x30/0x30 [ 189.703964][ T7523] ? __import_iovec+0x5f2/0x850 [ 189.709109][ T7523] ? import_iovec+0x73/0xa0 [ 189.713868][ T7523] ___sys_sendmsg+0x2a6/0x360 [ 189.718817][ T7523] ? __sys_sendmsg+0x2a0/0x2a0 [ 189.723965][ T7523] ? __lock_acquire+0x7d40/0x7d40 [ 189.729227][ T7523] __se_sys_sendmsg+0x1c2/0x2b0 [ 189.734252][ T7523] ? __x64_sys_sendmsg+0x80/0x80 [ 189.739307][ T7523] ? lockdep_hardirqs_on+0x98/0x150 [ 189.745553][ T7523] do_syscall_64+0x55/0xa0 [ 189.750680][ T7523] ? clear_bhb_loop+0x40/0x90 [ 189.755639][ T7523] ? clear_bhb_loop+0x40/0x90 [ 189.760659][ T7523] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 189.767310][ T7523] RIP: 0033:0x7f507c79c799 [ 189.771818][ T7523] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 189.792179][ T7523] RSP: 002b:00007f507d6e9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 189.800982][ T7523] RAX: ffffffffffffffda RBX: 00007f507ca15fa0 RCX: 00007f507c79c799 [ 189.810284][ T7523] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 189.819119][ T7523] RBP: 00007f507d6e9090 R08: 0000000000000000 R09: 0000000000000000 [ 189.828237][ T7523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 189.836920][ T7523] R13: 00007f507ca16038 R14: 00007f507ca15fa0 R15: 00007ffe40928278 [ 189.845219][ T7523] [ 190.062303][ T7529] netlink: 'syz.2.508': attribute type 39 has an invalid length. [ 190.081694][ T7531] netlink: 'syz.0.509': attribute type 20 has an invalid length. [ 190.312440][ T7539] netlink: 'syz.0.512': attribute type 39 has an invalid length. [ 190.455118][ T7544] netlink: 'syz.2.513': attribute type 21 has an invalid length. [ 190.465188][ T7544] netlink: 156 bytes leftover after parsing attributes in process `syz.2.513'. [ 191.005138][ T5780] Bluetooth: hci3: unexpected event 0x08 length: 15 > 4 [ 191.198864][ T7567] netlink: 'syz.3.522': attribute type 39 has an invalid length. [ 193.072344][ T7572] netlink: 'syz.1.523': attribute type 4 has an invalid length. [ 193.098038][ T7572] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.523'. [ 193.397504][ T7588] FAULT_INJECTION: forcing a failure. [ 193.397504][ T7588] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 193.417426][ T7589] netlink: 'syz.3.527': attribute type 39 has an invalid length. [ 193.425700][ T7588] CPU: 0 PID: 7588 Comm: syz.1.528 Not tainted syzkaller #0 [ 193.433089][ T7588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 193.443397][ T7588] Call Trace: [ 193.446734][ T7588] [ 193.449723][ T7588] dump_stack_lvl+0x18c/0x250 [ 193.454491][ T7588] ? show_regs_print_info+0x20/0x20 [ 193.459769][ T7588] ? load_image+0x400/0x400 [ 193.464349][ T7588] ? __might_fault+0xaa/0x120 [ 193.469098][ T7588] ? __lock_acquire+0x7d40/0x7d40 [ 193.474385][ T7588] should_fail_ex+0x39d/0x4d0 [ 193.479159][ T7588] _copy_from_iter+0x1d9/0x12e0 [ 193.484353][ T7588] ? slab_post_alloc_hook+0x8a/0x4b0 [ 193.490052][ T7588] ? __virt_addr_valid+0x18c/0x540 [ 193.495272][ T7588] ? __lock_acquire+0x7d40/0x7d40 [ 193.500346][ T7588] ? rcu_is_watching+0x15/0xb0 [ 193.505200][ T7588] ? copyout_mc+0x70/0x70 [ 193.509589][ T7588] ? __virt_addr_valid+0x18c/0x540 [ 193.514848][ T7588] ? __virt_addr_valid+0x18c/0x540 [ 193.520097][ T7588] ? __virt_addr_valid+0x469/0x540 [ 193.525270][ T7588] ? __check_object_size+0x506/0xa20 [ 193.530737][ T7588] netlink_sendmsg+0x76b/0xbf0 [ 193.535588][ T7588] ? perf_trace_lock+0x304/0x3b0 [ 193.540858][ T7588] ? netlink_getsockopt+0x590/0x590 [ 193.546669][ T7588] ? aa_sock_msg_perm+0x94/0x150 [ 193.552023][ T7588] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 193.557666][ T7588] ? security_socket_sendmsg+0x80/0xa0 [ 193.563233][ T7588] ? netlink_getsockopt+0x590/0x590 [ 193.568512][ T7588] ____sys_sendmsg+0x5ba/0x960 [ 193.573457][ T7588] ? __asan_memset+0x22/0x40 [ 193.578590][ T7588] ? __sys_sendmsg_sock+0x30/0x30 [ 193.583753][ T7588] ? __import_iovec+0x5f2/0x850 [ 193.588916][ T7588] ? import_iovec+0x73/0xa0 [ 193.593675][ T7588] ___sys_sendmsg+0x2a6/0x360 [ 193.598445][ T7588] ? __sys_sendmsg+0x2a0/0x2a0 [ 193.603419][ T7588] ? __lock_acquire+0x7d40/0x7d40 [ 193.608680][ T7588] __se_sys_sendmsg+0x1c2/0x2b0 [ 193.613850][ T7588] ? __x64_sys_sendmsg+0x80/0x80 [ 193.618958][ T7588] ? lockdep_hardirqs_on+0x98/0x150 [ 193.624214][ T7588] do_syscall_64+0x55/0xa0 [ 193.628697][ T7588] ? clear_bhb_loop+0x40/0x90 [ 193.633433][ T7588] ? clear_bhb_loop+0x40/0x90 [ 193.638346][ T7588] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 193.644487][ T7588] RIP: 0033:0x7f9646b9c799 [ 193.648978][ T7588] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 193.668921][ T7588] RSP: 002b:00007f9647b3f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 193.677953][ T7588] RAX: ffffffffffffffda RBX: 00007f9646e15fa0 RCX: 00007f9646b9c799 [ 193.686703][ T7588] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 193.694843][ T7588] RBP: 00007f9647b3f090 R08: 0000000000000000 R09: 0000000000000000 [ 193.703029][ T7588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 193.711248][ T7588] R13: 00007f9646e16038 R14: 00007f9646e15fa0 R15: 00007ffe06ddc288 [ 193.719776][ T7588] [ 193.886559][ T5780] Bluetooth: hci2: unexpected event 0x08 length: 15 > 4 [ 193.962584][ T7604] netlink: 'syz.3.534': attribute type 21 has an invalid length. [ 193.981492][ T7604] netlink: 'syz.3.534': attribute type 1 has an invalid length. [ 193.989760][ T7604] netlink: 16050 bytes leftover after parsing attributes in process `syz.3.534'. [ 194.456803][ T7616] netlink: 208064 bytes leftover after parsing attributes in process `syz.0.538'. [ 194.469876][ T7616] smc: net device  applied user defined pnetid CONFIG [ 194.768897][ T7626] FAULT_INJECTION: forcing a failure. [ 194.768897][ T7626] name failslab, interval 1, probability 0, space 0, times 0 [ 194.782665][ T7626] CPU: 1 PID: 7626 Comm: syz.2.541 Not tainted syzkaller #0 [ 194.790591][ T7626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 194.801255][ T7626] Call Trace: [ 194.804601][ T7626] [ 194.807631][ T7626] dump_stack_lvl+0x18c/0x250 [ 194.812502][ T7626] ? show_regs_print_info+0x20/0x20 [ 194.818174][ T7626] ? load_image+0x400/0x400 [ 194.823133][ T7626] ? verify_lock_unused+0x140/0x140 [ 194.829037][ T7626] ? perf_trace_lock_acquire+0x34f/0x410 [ 194.835500][ T7626] should_fail_ex+0x39d/0x4d0 [ 194.840910][ T7626] should_failslab+0x9/0x20 [ 194.845755][ T7626] slab_pre_alloc_hook+0x59/0x310 [ 194.852269][ T7626] kmem_cache_alloc+0x5a/0x2d0 [ 194.857769][ T7626] ? skb_clone+0x1eb/0x370 [ 194.862543][ T7626] skb_clone+0x1eb/0x370 [ 194.866977][ T7626] __netlink_deliver_tap+0x41c/0x830 [ 194.872535][ T7626] ? netlink_deliver_tap+0x2e/0x1b0 [ 194.877923][ T7626] netlink_deliver_tap+0x19c/0x1b0 [ 194.883916][ T7626] netlink_unicast+0x72c/0x8d0 [ 194.889267][ T7626] netlink_sendmsg+0x8d0/0xbf0 [ 194.894500][ T7626] ? perf_trace_lock+0x304/0x3b0 [ 194.900519][ T7626] ? netlink_getsockopt+0x590/0x590 [ 194.906447][ T7626] ? aa_sock_msg_perm+0x94/0x150 [ 194.912074][ T7626] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 194.917873][ T7626] ? security_socket_sendmsg+0x80/0xa0 [ 194.923955][ T7626] ? netlink_getsockopt+0x590/0x590 [ 194.930404][ T7626] ____sys_sendmsg+0x5ba/0x960 [ 194.937010][ T7626] ? __asan_memset+0x22/0x40 [ 194.941884][ T7626] ? __sys_sendmsg_sock+0x30/0x30 [ 194.947193][ T7626] ? __import_iovec+0x5f2/0x850 [ 194.952244][ T7626] ? import_iovec+0x73/0xa0 [ 194.956900][ T7626] ___sys_sendmsg+0x2a6/0x360 [ 194.961959][ T7626] ? __sys_sendmsg+0x2a0/0x2a0 [ 194.966852][ T7626] ? __lock_acquire+0x7d40/0x7d40 [ 194.972005][ T7626] __se_sys_sendmsg+0x1c2/0x2b0 [ 194.976940][ T7626] ? __x64_sys_sendmsg+0x80/0x80 [ 194.982411][ T7626] ? lockdep_hardirqs_on+0x98/0x150 [ 194.988057][ T7626] do_syscall_64+0x55/0xa0 [ 194.992577][ T7626] ? clear_bhb_loop+0x40/0x90 [ 194.997717][ T7626] ? clear_bhb_loop+0x40/0x90 [ 195.002739][ T7626] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 195.008888][ T7626] RIP: 0033:0x7fdd2519c799 [ 195.013563][ T7626] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.034393][ T7626] RSP: 002b:00007fdd25fea028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 195.043968][ T7626] RAX: ffffffffffffffda RBX: 00007fdd25415fa0 RCX: 00007fdd2519c799 [ 195.053231][ T7626] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 195.062171][ T7626] RBP: 00007fdd25fea090 R08: 0000000000000000 R09: 0000000000000000 [ 195.070414][ T7626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.078731][ T7626] R13: 00007fdd25416038 R14: 00007fdd25415fa0 R15: 00007ffe532dfcd8 [ 195.087927][ T7626] [ 195.123371][ T7626] netlink: 'syz.2.541': attribute type 39 has an invalid length. [ 195.140704][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.147316][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.336939][ T7636] netlink: 'syz.1.544': attribute type 29 has an invalid length. [ 195.355907][ T7636] netlink: 'syz.1.544': attribute type 29 has an invalid length. [ 195.369896][ T7636] netlink: 'syz.1.544': attribute type 29 has an invalid length. [ 195.392937][ T7636] netlink: 65051 bytes leftover after parsing attributes in process `syz.1.544'. [ 195.406515][ T5780] Bluetooth: hci0: unexpected event 0x08 length: 15 > 4 [ 195.499528][ T7638] syzkaller0: entered promiscuous mode [ 195.513935][ T7638] syzkaller0: entered allmulticast mode [ 195.522374][ T7636] netlink: 'syz.1.544': attribute type 39 has an invalid length. [ 195.562413][ T7638] netlink: 'syz.0.545': attribute type 2 has an invalid length. [ 195.591301][ T7638] netlink: 60 bytes leftover after parsing attributes in process `syz.0.545'. [ 198.329991][ T7662] netlink: 4 bytes leftover after parsing attributes in process `syz.3.551'. [ 198.375557][ T7670] netlink: 'syz.1.553': attribute type 5 has an invalid length. [ 198.524886][ T7681] netlink: 'syz.3.554': attribute type 39 has an invalid length. [ 198.540800][ T7681] FAULT_INJECTION: forcing a failure. [ 198.540800][ T7681] name failslab, interval 1, probability 0, space 0, times 0 [ 198.583655][ T7681] CPU: 0 PID: 7681 Comm: syz.3.554 Not tainted syzkaller #0 [ 198.591429][ T7681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 198.601781][ T7681] Call Trace: [ 198.605162][ T7681] [ 198.608188][ T7681] dump_stack_lvl+0x18c/0x250 [ 198.613180][ T7681] ? show_regs_print_info+0x20/0x20 [ 198.618494][ T7681] ? load_image+0x400/0x400 [ 198.623119][ T7681] ? __might_sleep+0xe0/0xe0 [ 198.627818][ T7681] ? __lock_acquire+0x7d40/0x7d40 [ 198.633148][ T7681] should_fail_ex+0x39d/0x4d0 [ 198.638127][ T7681] should_failslab+0x9/0x20 [ 198.642784][ T7681] slab_pre_alloc_hook+0x59/0x310 [ 198.648099][ T7681] kmem_cache_alloc_node+0x60/0x320 [ 198.653411][ T7681] ? __alloc_skb+0x103/0x2c0 [ 198.658258][ T7681] __alloc_skb+0x103/0x2c0 [ 198.662894][ T7681] netlink_ack+0x376/0x1180 [ 198.667528][ T7681] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 198.673341][ T7681] ? netlink_dump+0xe50/0xe50 [ 198.678098][ T7681] ? perf_trace_lock+0x304/0x3b0 [ 198.683275][ T7681] netlink_rcv_skb+0x2c5/0x4d0 [ 198.688203][ T7681] ? rtnetlink_bind+0x80/0x80 [ 198.694283][ T7681] ? netlink_ack+0x1180/0x1180 [ 198.699928][ T7681] ? __lock_acquire+0x7d40/0x7d40 [ 198.705895][ T7681] ? netlink_deliver_tap+0x2e/0x1b0 [ 198.711794][ T7681] netlink_unicast+0x751/0x8d0 [ 198.716717][ T7681] netlink_sendmsg+0x8d0/0xbf0 [ 198.721779][ T7681] ? perf_trace_lock+0x304/0x3b0 [ 198.727127][ T7681] ? netlink_getsockopt+0x590/0x590 [ 198.732451][ T7681] ? aa_sock_msg_perm+0x94/0x150 [ 198.737492][ T7681] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 198.742881][ T7681] ? security_socket_sendmsg+0x80/0xa0 [ 198.748765][ T7681] ? netlink_getsockopt+0x590/0x590 [ 198.754366][ T7681] ____sys_sendmsg+0x5ba/0x960 [ 198.759251][ T7681] ? __asan_memset+0x22/0x40 [ 198.764076][ T7681] ? __sys_sendmsg_sock+0x30/0x30 [ 198.769270][ T7681] ? __import_iovec+0x5f2/0x850 [ 198.774247][ T7681] ? import_iovec+0x73/0xa0 [ 198.778977][ T7681] ___sys_sendmsg+0x2a6/0x360 [ 198.784268][ T7681] ? __sys_sendmsg+0x2a0/0x2a0 [ 198.789744][ T7681] ? __lock_acquire+0x7d40/0x7d40 [ 198.795083][ T7681] __se_sys_sendmsg+0x1c2/0x2b0 [ 198.800313][ T7681] ? __x64_sys_sendmsg+0x80/0x80 [ 198.805757][ T7681] ? lockdep_hardirqs_on+0x98/0x150 [ 198.811913][ T7681] do_syscall_64+0x55/0xa0 [ 198.816641][ T7681] ? clear_bhb_loop+0x40/0x90 [ 198.821725][ T7681] ? clear_bhb_loop+0x40/0x90 [ 198.826609][ T7681] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 198.833054][ T7681] RIP: 0033:0x7f0a6d99c799 [ 198.837573][ T7681] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 198.859129][ T7681] RSP: 002b:00007f0a6e928028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 198.868491][ T7681] RAX: ffffffffffffffda RBX: 00007f0a6dc15fa0 RCX: 00007f0a6d99c799 [ 198.877087][ T7681] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 198.885175][ T7681] RBP: 00007f0a6e928090 R08: 0000000000000000 R09: 0000000000000000 [ 198.893253][ T7681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 198.901294][ T7681] R13: 00007f0a6dc16038 R14: 00007f0a6dc15fa0 R15: 00007ffe5a25e918 [ 198.909438][ T7681] [ 198.918336][ T5780] Bluetooth: hci2: unexpected event 0x08 length: 15 > 4 [ 199.029050][ T7688] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.556'. [ 199.821892][ T7706] netlink: 'syz.0.561': attribute type 7 has an invalid length. [ 199.843530][ T7706] netlink: 'syz.0.561': attribute type 1 has an invalid length. [ 199.851389][ T7706] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.561'. [ 200.362747][ T7715] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 200.378373][ T7715] pim6reg1: linktype set to 774 [ 200.419180][ T5780] Bluetooth: hci3: unexpected event 0x08 length: 15 > 4 [ 200.631592][ T7724] netlink: 'syz.3.567': attribute type 39 has an invalid length. [ 200.906863][ T6721] tipc: Subscription rejected, illegal request [ 200.913973][ T7732] netlink: 152 bytes leftover after parsing attributes in process `syz.3.571'. [ 200.923559][ T7732] tc_dump_action: action bad kind [ 201.525449][ T7754] netlink: 'syz.2.578': attribute type 10 has an invalid length. [ 203.455805][ T7754] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 203.494182][ T5780] Bluetooth: hci2: unexpected event 0x08 length: 15 > 4 [ 203.504171][ T7753] netlink: 'syz.2.578': attribute type 10 has an invalid length. [ 203.840340][ T7757] netlink: 'syz.3.576': attribute type 39 has an invalid length. [ 204.212685][ T7777] netlink: 'syz.2.580': attribute type 39 has an invalid length. [ 204.243395][ T7777] FAULT_INJECTION: forcing a failure. [ 204.243395][ T7777] name failslab, interval 1, probability 0, space 0, times 0 [ 204.266101][ T7777] CPU: 1 PID: 7777 Comm: syz.2.580 Not tainted syzkaller #0 [ 204.273713][ T7777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 204.283988][ T7777] Call Trace: [ 204.287309][ T7777] [ 204.290369][ T7777] dump_stack_lvl+0x18c/0x250 [ 204.295566][ T7777] ? show_regs_print_info+0x20/0x20 [ 204.300929][ T7777] ? load_image+0x400/0x400 [ 204.305738][ T7777] ? verify_lock_unused+0x140/0x140 [ 204.311691][ T7777] ? perf_trace_lock+0xfc/0x3b0 [ 204.317262][ T7777] should_fail_ex+0x39d/0x4d0 [ 204.322653][ T7777] should_failslab+0x9/0x20 [ 204.327397][ T7777] slab_pre_alloc_hook+0x59/0x310 [ 204.332686][ T7777] kmem_cache_alloc+0x5a/0x2d0 [ 204.337529][ T7777] ? skb_clone+0x1eb/0x370 [ 204.342091][ T7777] skb_clone+0x1eb/0x370 [ 204.346501][ T7777] __netlink_deliver_tap+0x41c/0x830 [ 204.352167][ T7777] ? netlink_deliver_tap+0x2e/0x1b0 [ 204.357547][ T7777] netlink_deliver_tap+0x19c/0x1b0 [ 204.362919][ T7777] netlink_sendskb+0x68/0x130 [ 204.367925][ T7777] netlink_ack+0xce1/0x1180 [ 204.372514][ T7777] ? netlink_dump+0xe50/0xe50 [ 204.377529][ T7777] ? perf_trace_lock+0xfc/0x3b0 [ 204.382723][ T7777] netlink_rcv_skb+0x2c5/0x4d0 [ 204.387647][ T7777] ? rtnetlink_bind+0x80/0x80 [ 204.392397][ T7777] ? netlink_ack+0x1180/0x1180 [ 204.397340][ T7777] ? __lock_acquire+0x7d40/0x7d40 [ 204.402698][ T7777] ? netlink_deliver_tap+0x2e/0x1b0 [ 204.408446][ T7777] netlink_unicast+0x751/0x8d0 [ 204.413330][ T7777] netlink_sendmsg+0x8d0/0xbf0 [ 204.418178][ T7777] ? netlink_getsockopt+0x590/0x590 [ 204.423446][ T7777] ? aa_sock_msg_perm+0x94/0x150 [ 204.428441][ T7777] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 204.433773][ T7777] ? security_socket_sendmsg+0x80/0xa0 [ 204.439276][ T7777] ? netlink_getsockopt+0x590/0x590 [ 204.444540][ T7777] ____sys_sendmsg+0x5ba/0x960 [ 204.449471][ T7777] ? __asan_memset+0x22/0x40 [ 204.454143][ T7777] ? __sys_sendmsg_sock+0x30/0x30 [ 204.459331][ T7777] ? __import_iovec+0x5f2/0x850 [ 204.464352][ T7777] ? import_iovec+0x73/0xa0 [ 204.468924][ T7777] ___sys_sendmsg+0x2a6/0x360 [ 204.473950][ T7777] ? __sys_sendmsg+0x2a0/0x2a0 [ 204.478988][ T7777] ? __lock_acquire+0x7d40/0x7d40 [ 204.484751][ T7777] __se_sys_sendmsg+0x1c2/0x2b0 [ 204.490114][ T7777] ? __x64_sys_sendmsg+0x80/0x80 [ 204.495503][ T7777] ? lockdep_hardirqs_on+0x98/0x150 [ 204.501119][ T7777] do_syscall_64+0x55/0xa0 [ 204.505627][ T7777] ? clear_bhb_loop+0x40/0x90 [ 204.510842][ T7777] ? clear_bhb_loop+0x40/0x90 [ 204.515736][ T7777] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 204.523068][ T7777] RIP: 0033:0x7fdd2519c799 [ 204.527627][ T7777] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 204.548089][ T7777] RSP: 002b:00007fdd25fa8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 204.556639][ T7777] RAX: ffffffffffffffda RBX: 00007fdd25416180 RCX: 00007fdd2519c799 [ 204.564677][ T7777] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 204.572900][ T7777] RBP: 00007fdd25fa8090 R08: 0000000000000000 R09: 0000000000000000 [ 204.580933][ T7777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 204.589122][ T7777] R13: 00007fdd25416218 R14: 00007fdd25416180 R15: 00007ffe532dfcd8 [ 204.597163][ T7777] [ 205.030043][ T7788] netlink: 'syz.0.585': attribute type 41 has an invalid length. [ 205.051321][ T7788] netlink: 40 bytes leftover after parsing attributes in process `syz.0.585'. [ 205.513964][ T7799] netlink: 'syz.2.590': attribute type 39 has an invalid length. [ 205.536606][ T7796] netlink: 4 bytes leftover after parsing attributes in process `syz.1.589'. [ 205.679869][ T5780] Bluetooth: hci2: unexpected event 0x08 length: 15 > 4 [ 205.927078][ T7810] netlink: 'syz.2.592': attribute type 1 has an invalid length. [ 205.978660][ T7810] netlink: 157116 bytes leftover after parsing attributes in process `syz.2.592'. [ 205.999321][ T7804] IPv6: Can't replace route, no match found [ 206.154701][ T7815] netlink: 'syz.0.594': attribute type 39 has an invalid length. [ 206.166526][ T7815] FAULT_INJECTION: forcing a failure. [ 206.166526][ T7815] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 206.214106][ T7815] CPU: 0 PID: 7815 Comm: syz.0.594 Not tainted syzkaller #0 [ 206.222550][ T7815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 206.232862][ T7815] Call Trace: [ 206.236479][ T7815] [ 206.239617][ T7815] dump_stack_lvl+0x18c/0x250 [ 206.244399][ T7815] ? show_regs_print_info+0x20/0x20 [ 206.249911][ T7815] ? load_image+0x400/0x400 [ 206.254532][ T7815] ? __lock_acquire+0x7d40/0x7d40 [ 206.259661][ T7815] ? snprintf+0xe9/0x140 [ 206.264011][ T7815] should_fail_ex+0x39d/0x4d0 [ 206.268888][ T7815] _copy_to_user+0x2f/0xa0 [ 206.273405][ T7815] simple_read_from_buffer+0xe7/0x150 [ 206.278984][ T7815] proc_fail_nth_read+0x1e8/0x260 [ 206.284111][ T7815] ? proc_fault_inject_write+0x360/0x360 [ 206.290036][ T7815] ? fsnotify_perm+0x271/0x5e0 [ 206.294902][ T7815] ? proc_fault_inject_write+0x360/0x360 [ 206.300640][ T7815] vfs_read+0x28b/0x970 [ 206.305001][ T7815] ? kernel_read+0x1e0/0x1e0 [ 206.309857][ T7815] ? __fget_files+0x28/0x4b0 [ 206.314548][ T7815] ? __fget_files+0x28/0x4b0 [ 206.319425][ T7815] ? __fget_files+0x43d/0x4b0 [ 206.324246][ T7815] ? __fdget_pos+0x2a3/0x330 [ 206.328929][ T7815] ? ksys_read+0x75/0x260 [ 206.333457][ T7815] ksys_read+0x150/0x260 [ 206.337842][ T7815] ? vfs_write+0x990/0x990 [ 206.342558][ T7815] ? lockdep_hardirqs_on+0x98/0x150 [ 206.347875][ T7815] do_syscall_64+0x55/0xa0 [ 206.352412][ T7815] ? clear_bhb_loop+0x40/0x90 [ 206.357224][ T7815] ? clear_bhb_loop+0x40/0x90 [ 206.362086][ T7815] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 206.368151][ T7815] RIP: 0033:0x7f507c75cfce [ 206.372744][ T7815] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 206.392738][ T7815] RSP: 002b:00007f507d6e8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 206.401417][ T7815] RAX: ffffffffffffffda RBX: 00007f507d6e96c0 RCX: 00007f507c75cfce [ 206.409464][ T7815] RDX: 000000000000000f RSI: 00007f507d6e90a0 RDI: 000000000000000a [ 206.417481][ T7815] RBP: 00007f507d6e9090 R08: 0000000000000000 R09: 0000000000000000 [ 206.425494][ T7815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 206.433601][ T7815] R13: 00007f507ca16038 R14: 00007f507ca15fa0 R15: 00007ffe40928278 [ 206.441679][ T7815] [ 206.496396][ T7820] netlink: 152 bytes leftover after parsing attributes in process `syz.1.595'. [ 206.955798][ T7826] netlink: 14 bytes leftover after parsing attributes in process `syz.0.598'. [ 207.260200][ T7826] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 207.405410][ T7826] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 207.451788][ T7826] bond0 (unregistering): Released all slaves [ 208.040978][ T5780] Bluetooth: hci2: unexpected event 0x08 length: 15 > 4 [ 208.517854][ T7844] netlink: 'syz.1.603': attribute type 39 has an invalid length. [ 208.987808][ T7857] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.607'. [ 209.489217][ T7869] netlink: 'syz.2.611': attribute type 2 has an invalid length. [ 209.515715][ T7869] netlink: 132 bytes leftover after parsing attributes in process `syz.2.611'. Stopping sshd: [ 209.655025][ T5780] Bluetooth: hci3: unexpected event 0x08 length: 15 > 4 [ 210.541306][ T7897] netlink: 'syz.1.618': attribute type 27 has an invalid length. [ 210.709348][ T7897] netlink: 2418 bytes leftover after parsing attributes in process `syz.1.618'. stopped /usr/sbin/sshd (pid 5529) OK Stopping crond: [ 211.263972][ T7910] netlink: 60 bytes leftover after parsing attributes in process `syz.0.620'. stopped /usr/sbin/crond (pid 5513) OK Stopping dhcpcd... stopped /sbin/dhcpcd (pid 5433) Stopping network: [ 214.228717][ T7910] netlink: 60 bytes leftover after parsing attributes in process `syz.0.620'. OK Stopping iptables: OK Stopping system message bus: done [ 214.597475][ T5780] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4 [ 217.695090][ T5084] Bluetooth: hci1: command 0x0406 tx timeout [ 217.708825][ T5084] Bluetooth: hci3: command 0x0406 tx timeout [ 217.709003][ T5775] Bluetooth: hci2: command 0x0406 tx timeout [ 217.716352][ T5084] Bluetooth: hci0: command 0x0406 tx timeout Stopping klogd: OK Stopping acpid: OK Stopping syslogd: stopped /sbin/syslogd (pid 5121) OK umount: can't remount debugfs read-only [ 224.734401][ T8292] netlink: 160 bytes leftover after parsing attributes in process `syz.3.776'. [ 224.780314][ T8292] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! Sent SIGTERM to all processes Connection to 10.128.0.156 closed by remote host. Sent SIGKILL to all processes Requesting system poweroff [ 226.167907][ T43] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.276635][ T43] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.358066][ T43] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.447909][ T43] bond0: (slave netdevsim0): Releasing backup interface [ 226.462820][ T43] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.008775][ T43] bridge0: port 3(erspan0) entered disabled state [ 227.026139][ T43] erspan0 (unregistering): left allmulticast mode [ 227.032824][ T43] erspan0 (unregistering): left promiscuous mode [ 227.039354][ T43] bridge0: port 3(erspan0) entered disabled state [ 227.162891][ T8305] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 227.173276][ T8305] ACPI: PM: Preparing to enter system sleep state S5 [ 227.183074][ T8305] kvm: exiting hardware virtualization [ 227.189453][ T8305] reboot: Power down serialport: VM disconnected.